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AMENDMENTS TO THE CLAIMS 

The foUo&dng is a complete, marked up listing of revised claims with a 
status Identifier in parentheses, underlined text indicating insertions, and 
strlkethrough ; and/ or double-bracketed text indicating deletions. 

LISTING OF CLAIMS: 



(Currentffy Amended) An electronic data processing method method 
comprising: 

performi ng, by a security check device, a security check to 
ascertain a user identity by comparing entered identity information with 
stored u^er identity data; 

associating the user identity with a user identifie r stored in a first 
data store; 



associating the user identifier with at least one user group 



stored in a second data store; 



identifier 

selecting a user group identifier and acquiring at least one data 
key associated therewith from a centralized third data store including all 
availablq keys, wherein the at least one user group identifier and the a t 
least on^ data key are b e ing associated with one another; and 
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perforatin g, by at least one processor, at least one of encrypting 
and decrypting data using the acquired at least one data key and 
inhibiting user recognition of the acquired at least one data key, 

2, (Previously Presented) The method as claimed in claim 1 > wherein the 

security Icheck involves at least one of checking a user-specific biometiic 
data* an electronic key and a mechanical key. 



3.-4. 



(Canceled) 



5. (Withdrawn) The system as claimed in claim 8, wherein the data key is 
accessible using a data telecommunication device, 

6. (Previously Presented) The method as claimed in claim 1, wherein a 
plurality of data keys are simultaneously assignable to one user 
identifier. 

7. (Previously Presented) The method as claimed in claim 1 , wherein the 
data ar^ medically relevant, wherein the users include personnel within a 
medical facility, and wherein common user group identifiers are assigned 
the samje data key. 
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S. (Withdrawn) An electronic data processing system comprising: 

a Security check device to ascertain user identity a first data store 
for storage and retrieval of at least one user identifier and associated 
user identity data: 

a second data store for storage and retrieval of the at least one 
user ide atifier and associated at least one user group identifier: 

a centralized third data store for storage and retrieval of all 
available data keys, the centralized third data store including at least one 
associated user group identifier matched with at least one associated 
data key; and 

at least one processor to ascertain a user identifier by comparing 
data bet iveen the security check device and the first data store, to 
ascertain at least one user group from the second data store, to ascertain 
at least one data key for at least one user group from the third data 
store, and for performing at least one of data encryption and decryption 
using the at least one data key. 

9. (Withdrawn) The electronic data processing system as claimed in claim 8, 
whereinjlthe security check device reads biometric data from the user. 
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10. (Withdrawn) The electronic data processing system as claimed in claim 8, 
wherein the security check device is a user-specific at least one of 
electronic and mechanical key. 



11. (Canceled) 

12. (Withdrajyvn) The electronic data processing system as claimed in claim 8 f 
wherein [the system uses a data telecommunication device to access the 
third daja store. 

13. CWithdr^yvn) The electronic data processing system as claimed in claim 8, 
wherein the system is a medical workstation for handling medically 
relevant data. 

14. (Previously Presented) A computer-readable storage medium including 
computet executable instructions that, when executed* cause a computer 
to carry out the method as claimed in claim 1, 

15. -21. (Canceled) 



PAGE 6/18 * RCVD AT 6/17/2009 7:25:35 PM 



[Eastern Daylight Time] * SVR:USPTO-EFXRF-6/31 * DNIS:2738300 * CSID:703 668 8200 * DURATION (mm-ss):02-42 



JUN-17-2009 19:21 



Best Available Copy 

HDP 



703 668 8200 



P. 007 



Attorney Docket No: 32860-000704/US 
Application No. 10/785,180 

Page 6 

22. (Curren by Amended) A method for at least one of encryption and 
decryption of data, comprising: 

p<^onnin gL_bK_a se curit y check device, a security check to 
ascertaip an identity of a user bv comparing entered identity information 
with stolre d user identity data : 



associating the user identity with a user identifier stored in a first 



data stcre 



the useifr 
the plu 



at 



processo r 



associating the user identifier w ith a user group including a 
plurality of users such that a data key for at least one of encrypting and 
decrypting data is assigned to the user based on the group with which 
identifier i s associated, the same data key being assignable to 



ijality of users; and 
least one of encrypting or decrypting dat ajby at least one 
i using the assigned data key. 



23. (Previoi^sly Presented) A computer-readable storage medium including 
computer executable instructions that, when executed, cause a computer 
to, carrtf out the method as claimed in claim 22. 

24. (Originajl) The method as claimed in claim 22, wherein the security check 
involves) checking biometric data of the user. 
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29. 



25. (Original! Hie method as claimed in claim 22, wherein the security check 
involves checking a user-specific at least one of electronic and 
mechanical key. 

26. (Original) The method as claimed in claim 22, wherein the data key Is 
ascertained by comparing the data obtained in the security check with 
content of a data key memory. 



27. (Original 
in the 



memory 

28, (Original) 
keys are 



(Original 
medlcallt 
facility, 
key. 



The method as claimed In claim 26, wherein the data obtained 
security check are compared with the content of the data key 
iising a data telecommunication device. 



The method as claimed in claim 22, wherein a plurality of data 
simultaneously assignable to one user. 



The method as claimed in claim 22, wherein the data are 
relevant, wherein the users include personnel at a medical 
a|hd wherein common user groups are assigned the same data 
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30- (Original The method of claim 22, wherein users associated with a 



common 



31 . (Currentjly Amended) An electronic data processing facility for at least 
one of encryption and decryption of data, comprising: 

mfcans for performing a security check to ascertain an identity of a 
{comparing entered identity Information with stored user identity 



user bv 
data ; 



means for associating the user identity with a user identifier stored 



in a firsi 



mtans 



group 



includiqg 
the 
being 
least 



on* 5 



key. 



32. (Previou 



user group are assigned the same data key. 



data store: 



m*ans 



for associating the user identifier w ith a user group 
a plurality of users a data key is assigned to the user based on 
with which the user identifier i s associated, the same data key 

le to the plurality of users, and the data key being for at 
of encrypting and decrypting data; and 

for encrypting or decrypting data using the assigned data 



assigaabl 



*ly Presented) The method of claim 1, wherein a user identifier 
associated with a common user group identifier is assigned the same 
data ke>{ 
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33. (Withdrajtvn - Currently Amended) The system of claim 8, further 
comprising: 

[[A]] a foiirth data store for storage and retrieval of encrypted data. 



[Withdralym) The system of claim 8, wherein at least one of the first data 
data store and the fourth data store are combined. 



35. (Withdra wn) The system of claim 8. wherein the data store comprises: 

mechanical memory, electronic memory, and magnetic and optical media 
data storage. 



(Withdrawn) The system of claim 8, wherein the third data store is 
tjae first, second and fourth data stores. 



36. 

isolated from 



37. 

at least one of 



telecommunications 



(Withdrawn) The system of claim 8, wherein data entry and retrieval is 
manual and automated. 



38. (Withdr4wn) The system of claim 12, wherein the data 

device is removably and operatively associated with a 
computer netvterk for transfer of data. 
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39. (Withdrakvn) The system of claim 8, wherein the channel comprises an 
access and restriction process. 

40, (Withdralwn) The system of claim 39, wherein the channel access and 
restriction process functions operatively with the security check device. 
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